73f4ffb9d23a9f9fdad708fe97e976a3

Sharing

Copy URL

Twitter E-mail

General

Target

73f4ffb9d23a9f9fdad708fe97e976a3
Size

111KB
MD5

73f4ffb9d23a9f9fdad708fe97e976a3
SHA1

e0fbdf4ab726139847976877c3d3e1d500260385
SHA256

e2dde9e5d1894f9b122006aca11112cd8ad15df9a60d29688eff4f2f1e788efe
SHA512

ce39c5c63ed08349198975e3e8dc490a1d072582e47a40e7c345d0d0796e6f2d1f67483786ee29dcd76ef9707a014661680a57ec2362140df9f8777cd7af54c0
SSDEEP

3072:proQdlKU/IMbkKi44cp2ZJlLxsCBrv3wZ5:pZlhk/445TXb3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73f4ffb9d23a9f9fdad708fe97e976a3

Files

73f4ffb9d23a9f9fdad708fe97e976a3
.exe windows:5 windows x86 arch:x86

baebf64a2b72859a3014223ec2cc5c27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

IsDebuggerPresent
GetCommandLineW
GetTempPathA
VirtualProtect
GetModuleHandleA
InterlockedExchange
GetStartupInfoA
GetCurrentProcessId
LocalFileTimeToFileTime

user32

GetSysColor
MessageBeep
GetSystemMetrics
IsWindowEnabled
SetRect
GetMenuStringA
GetClientRect
SetActiveWindow
CreateMenu
IntersectRect
DeleteMenu
SetClipboardData
FrameRect
EnumThreadWindows

msvcrt

floor
__set_app_type
_errno
_onexit
_strlwr
_XcptFilter
__p__fmode
_adjust_fdiv
sqrt
exit
wcscat
_initterm
_acmdln
__getmainargs
__p__commode
srand
printf
fputs
_except_handler3
_utime
__setusermatherr

oleaut32

VariantCopy
SysAllocStringByteLen
GetActiveObject
SafeArrayPtrOfIndex
SetErrorInfo
SysReAllocStringLen
SafeArrayPutElement
SafeArrayRedim

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoTaskMemFree
CreateILockBytesOnHGlobal
OleDraw
OleFlushClipboard
ProgIDFromCLSID
CreateStreamOnHGlobal

advapi32

QueryServiceStatus
RegOpenKeyW
InitializeAcl
SetSecurityDescriptorGroup
RegOpenKeyExW

comctl32

ImageList_EndDrag
ImageList_LoadImageW
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_Destroy
ImageList_SetImageCount
ImageList_DrawEx

shell32

SHGetPathFromIDListA
DragQueryFileA
SHAddToRecentDocs
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceExW
DragAcceptFiles
ShellExecuteEx
DoEnvironmentSubstW
SHGetPathFromIDList

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

baebf64a2b72859a3014223ec2cc5c27

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

oleaut32

ole32

advapi32

comctl32

shell32

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB